Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/3b2539b95bd2004a9968ca4b3391ed4e2c8de777.roa
File:                     3b2539b95bd2004a9968ca4b3391ed4e2c8de777.roa (raw, json)
Hash identifier:          pc9CXYyw9iqjlOg5Xy1P85Af9I74amdt22NvhLvP5n0=
Subject key identifier:   CD:B8:E7:D5:0E:0B:86:5D:31:55:35:22:AC:5D:5D:0F:CF:6E:6D:E7
Certificate issuer:       /CN=e6245b6703466ee65faded994e4250d58dcd651f
Certificate serial:       043F08
Authority key identifier: 7B:F5:EB:DF:F4:09:D5:9E:D0:39:A6:33:9B:B1:44:C1:54:3E:BF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6245b6703466ee65faded994e4250d58dcd651f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/3b2539b95bd2004a9968ca4b3391ed4e2c8de777.roa
Signing time:             Mon 11 Apr 2022 14:12:12 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Thu 11 Apr 2024 03:00:00 +0000
asID:                     396982
IP address blocks:        179.61.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278280 (0x43f08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6245b6703466ee65faded994e4250d58dcd651f
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 11 03:00:00 2024 GMT
        Subject: CN=3b2539b95bd2004a9968ca4b3391ed4e2c8de777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:74:1d:86:db:aa:18:ff:41:08:e7:38:4f:
                    90:56:b4:25:ad:c7:2f:7a:22:ca:94:3d:4e:a1:71:
                    18:7a:18:0d:ea:fb:30:be:48:c0:0a:5e:d7:bc:a9:
                    67:8f:a9:d9:fd:54:21:47:b8:13:cd:2d:4d:b0:8b:
                    8a:f7:cf:45:4e:33:70:7d:63:99:be:77:bc:e1:1a:
                    b6:e3:cd:5f:68:57:f8:9f:21:f4:51:dd:eb:72:62:
                    61:67:62:cf:3f:ec:83:e9:b7:e6:4a:db:cb:ec:bc:
                    26:7d:dc:13:6b:14:81:a8:5a:01:f2:98:d3:40:b6:
                    74:1a:d9:d6:d7:c5:93:ca:06:5e:57:c8:2f:67:da:
                    20:08:7e:e2:b6:b1:e5:d0:2c:72:01:9d:c1:c5:56:
                    30:6c:50:e2:db:81:ae:0e:37:18:ba:aa:3f:54:c3:
                    f7:33:ff:ce:4d:2f:49:20:70:fa:5e:a9:65:3f:43:
                    10:3e:da:af:09:1a:91:15:36:9a:8d:be:46:47:2a:
                    63:57:1a:4d:2d:7f:fd:2c:57:af:67:e3:17:4e:00:
                    9f:27:e6:1e:44:10:d6:eb:6d:62:99:79:be:ed:8c:
                    97:a0:b8:2a:74:65:3e:74:e3:88:e5:90:e9:9a:06:
                    0a:4a:14:e3:22:ea:69:f1:fa:9e:07:1a:37:e5:e8:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B8:E7:D5:0E:0B:86:5D:31:55:35:22:AC:5D:5D:0F:CF:6E:6D:E7
            X509v3 Authority Key Identifier:
                keyid:7B:F5:EB:DF:F4:09:D5:9E:D0:39:A6:33:9B:B1:44:C1:54:3E:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6245b6703466ee65faded994e4250d58dcd651f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/3b2539b95bd2004a9968ca4b3391ed4e2c8de777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/e6245b6703466ee65faded994e4250d58dcd651f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:9e:d7:a8:9b:0e:f0:a7:7d:79:bc:55:49:8f:0d:a5:05:3c:
         41:2e:4f:01:95:ae:40:da:7e:b4:cf:b9:62:12:b4:61:05:2c:
         79:be:ed:48:79:ab:c1:7a:01:2d:c9:22:d5:3f:ee:f0:b6:10:
         24:bd:e9:62:60:89:d4:7e:fb:2f:39:24:27:a0:71:ec:b2:e3:
         3c:3e:ff:7d:e8:94:b4:af:48:f8:e3:e3:c2:bb:17:c6:bc:91:
         3a:90:08:2f:17:70:c3:10:86:8b:75:1b:3f:d1:e9:1b:b8:68:
         dc:b6:d6:8b:49:7d:d3:f3:21:92:1e:a2:6a:10:ae:22:cd:6c:
         7e:63:18:c5:dd:7a:69:75:d5:fd:0b:26:25:85:18:78:a8:a8:
         ed:82:42:b1:1b:26:a5:82:47:b8:f0:0d:2e:4d:9a:da:5a:3e:
         c9:95:9e:67:ee:7e:5e:e4:a2:d3:98:6f:4f:c4:70:3f:6d:aa:
         d0:86:31:59:33:f7:bd:4a:bf:37:00:7b:08:15:d4:af:6c:da:
         a0:fe:43:a1:5a:73:df:6f:b7:e5:24:c8:45:de:5a:a6:19:c2:
         fa:15:c2:59:08:e4:3f:11:0d:0e:12:0c:2a:92:81:69:c8:50:
         7b:71:56:07:eb:07:28:80:6a:00:c8:17:2d:e4:6c:0f:ed:c6:
         6f:3a:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----